AWS Well-Architected Tool (wellarchitected)

2026-11-14

17 new actions | 6 updated actions

Additions

    Actions
  • CreateAgentBasicProfile
    • Description:  Grants permission to create a basic profile for the calling account
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • CreateAgentOrganizationalProfile
    • Description:  Grants permission to create an organizational profile for use with AWS Organizations integration
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • CreateAgentOrganizationalReport
    • Description:  Grants permission to create an organizational report, a point-in-time snapshot of recommendations across all agent profiles in the AWS Organization
    • Access:  Write
  • DeleteAgentOrganizationalReport
    • Description:  Grants permission to delete an organizational report and its associated artifacts
    • Access:  Write
  • DeleteAgentProfilePolicy
    • Description:  Grants permission to remove the resource-based policy from the specified agent profile
    • Access:  Write
    • Resources: 

      Name: agent-profile

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • DeleteAgentRecommendationPolicy
    • Description:  Grants permission to remove the resource-based policy from the specified agent recommendation
    • Access:  Write
    • Resources: 

      Name: agent-recommendation

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • GetAgentOrganizationalReport
    • Description:  Grants permission to retrieve metadata and current state for a single organizational report
    • Access:  Read
  • GetAgentOrganizationalReportData
    • Description:  Grants permission to retrieve the data artifact for a completed organizational report as a short-lived presigned S3 URL
    • Access:  Read
  • GetAgentPreferences
    • Description:  Grants permission to get the caller's complete set of Well-Architected Agent preferences
    • Access:  Read
  • GetAgentProfilePolicy
    • Description:  Grants permission to retrieve the resource-based policy attached to the specified agent profile
    • Access:  Read
    • Resources: 

      Name: agent-profile

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • GetAgentRecommendationPolicy
    • Description:  Grants permission to retrieve the resource-based policy attached to the specified agent recommendation
    • Access:  Read
    • Resources: 

      Name: agent-recommendation

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • ListAgentOrganizationalReports
    • Description:  Grants permission to list organizational reports owned by the caller's account within the AWS Organization
    • Access:  List
  • PutAgentPreferences
    • Description:  Grants permission to create or replace the caller's Well-Architected Agent preferences
    • Access:  Write
  • PutAgentProfilePolicy
    • Description:  Grants permission to attach or replace a resource-based policy on the specified agent profile
    • Access:  Write
    • Resources: 

      Name: agent-profile

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • PutAgentRecommendationPolicy
    • Description:  Grants permission to attach or replace a resource-based policy on the specified agent recommendation
    • Access:  Write
    • Resources: 

      Name: agent-recommendation

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}
  • SendAgentOrganizationalReportDataToS3
    • Description:  Grants permission to write the data artifact for a completed organizational report directly into a caller-owned S3 bucket
    • Access:  Write
  • UpdateAgentOrganizationalProfile
    • Description:  Grants permission to update an organizational profile
    • Access:  Write
    • Resources: 

      Name: agent-profile

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates